$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: 9St/HEJFPZJ7oziHIZHFvUKRiQbGkUH1XF4RD1DZO0M= Subject key identifier: 2E:1C:9A:97:E0:0B:20:48:2C:E5:7E:A8:6D:94:EB:7C:8A:6A:D4:DC Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 2CA1D11792313DE3AA0D1259DC8597E8905A866E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 0552 Signing time: Mon 02 Mar 2026 12:21:36 +0000 Manifest this update: Mon 02 Mar 2026 12:16:36 +0000 Manifest next update: Thu 05 Mar 2026 15:57:36 +0000 Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: KZENmjzng1B5ngp4ij/Yuwn3bCPC8fqP8XgBPco2vV8=) 2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a1:d1:17:92:31:3d:e3:aa:0d:12:59:dc:85:97:e8:90:5a:86:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Mar 2 12:16:36 2026 GMT Not After : Mar 5 15:57:36 2026 GMT Subject: CN=2E1C9A97E00B20482CE57EA86D94EB7C8A6AD4DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e5:06:07:e5:a6:10:10:c4:b4:45:33:3d:a3: 90:f0:3a:fd:4c:bf:c6:d8:e7:e3:96:f7:23:c1:3d: 4d:73:cc:93:82:1b:eb:1a:af:16:d1:78:ad:0d:10: 76:9f:ff:d4:6e:68:18:a7:02:88:cf:90:f4:05:8f: bf:f5:c6:97:90:99:5e:f6:db:67:52:3f:f0:a5:72: 9b:92:51:82:52:12:bf:60:db:7f:15:fa:42:36:8d: 24:2a:06:27:8b:dc:ed:ef:1e:20:0f:94:02:47:29: a3:34:eb:fe:dd:ac:32:66:3f:21:2e:8b:21:95:90: c4:72:e0:0f:40:12:a2:8b:70:6e:d7:93:a6:60:b6: 64:25:e7:57:01:73:21:09:64:ba:7d:d9:78:c1:95: 0f:25:01:83:16:b3:d4:01:3d:53:67:13:13:39:86: ad:c1:64:5b:2a:3f:f8:12:e8:96:47:a3:e2:6a:03: f2:52:e9:f8:77:d6:98:75:f8:83:81:2f:3b:6f:78: 50:5a:b6:e3:df:78:64:ca:1d:2d:39:78:3e:2a:de: 28:92:55:ab:73:1f:11:b2:51:f5:51:fa:d6:21:10: 47:e8:b7:5a:fe:74:9c:e6:b8:8d:ca:04:13:43:80: 1a:dc:f2:ea:bb:8a:40:99:9c:4c:10:a8:62:7e:ac: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:9A:97:E0:0B:20:48:2C:E5:7E:A8:6D:94:EB:7C:8A:6A:D4:DC X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1b:fd:d7:c4:f5:1a:0d:21:fe:b0:7e:9e:6e:50:b0:e9:9b: 04:76:18:23:18:52:a8:8e:8d:ba:ac:e6:25:36:64:b6:cb:e7: e2:fe:76:9c:a7:bc:61:e0:ea:ce:b4:35:93:6b:47:f2:fe:c2: dd:fc:5d:b0:74:b6:1f:dc:b3:23:47:6f:b0:55:d6:c0:3b:76: f6:61:72:63:b2:24:5f:38:4f:df:39:ba:e3:94:d6:80:53:30: 6c:d8:5f:71:b0:69:1c:96:76:7a:f1:cf:77:e6:14:f3:07:fb: 51:6b:bd:38:17:06:13:ac:12:8a:d3:88:8e:f0:58:95:76:59: bf:af:d1:44:a1:01:cf:4e:fe:92:1e:44:17:2f:84:41:c6:56: 11:77:52:fa:7d:95:b4:e4:8e:fe:02:03:47:e9:c5:f7:fe:13: ef:82:50:fb:4a:e8:37:96:59:ed:e0:d4:9d:65:59:3e:92:ea: 9d:b1:a8:a2:12:84:be:53:09:ea:79:dd:08:cc:92:10:a6:75: f0:31:d2:4e:4a:43:e2:66:e8:7b:a4:c3:27:a5:ab:94:d6:e2: 3d:58:f7:07:4d:fd:05:14:2f:52:be:9e:e8:69:11:d8:2a:49: e6:64:36:00:06:9d:21:fd:0b:1c:7f:c6:92:a8:44:27:73:15: 9c:3b:26:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKHRF5IxPeOqDRJZ3IWX6JBahm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNjAzMDIxMjE2MzZaFw0yNjAzMDUxNTU3MzZaMDMxMTAvBgNV BAMTKDJFMUM5QTk3RTAwQjIwNDgyQ0U1N0VBODZEOTRFQjdDOEE2QUQ0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt5QYH5aYQEMS0RTM9o5DwOv1M v8bY5+OW9yPBPU1zzJOCG+sarxbReK0NEHaf/9RuaBinAojPkPQFj7/1xpeQmV72 22dSP/ClcpuSUYJSEr9g238V+kI2jSQqBieL3O3vHiAPlAJHKaM06/7drDJmPyEu iyGVkMRy4A9AEqKLcG7Xk6ZgtmQl51cBcyEJZLp92XjBlQ8lAYMWs9QBPVNnExM5 hq3BZFsqP/gS6JZHo+JqA/JS6fh31ph1+IOBLztveFBatuPfeGTKHS05eD4q3iiS VatzHxGyUfVR+tYhEEfot1r+dJzmuI3KBBNDgBrc8uq7ikCZnEwQqGJ+rFQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhyal+ALIEgs5X6obZTrfIpq1NwwHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkb/dfE9RoNIf6wfp5uULDpmwR2GCMYUqiO jbqs5iU2ZLbL5+L+dpynvGHg6s60NZNrR/L+wt38XbB0th/csyNHb7BV1sA7dvZh cmOyJF84T985uuOU1oBTMGzYX3GwaRyWdnrxz3fmFPMH+1FrvTgXBhOsEorTiI7w WJV2Wb+v0UShAc9O/pIeRBcvhEHGVhF3Uvp9lbTkjv4CA0fpxff+E++CUPtK6DeW We3g1J1lWT6S6p2xqKIShL5TCep53QjMkhCmdfAx0k5KQ+Jm6Hukwyelq5TW4j1Y 9wdN/QUUL1K+nuhpEdgqSeZkNgAGnSH9Cxx/xpKoRCdzFZw7JvA= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:33 2026 by rpki-client